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Encoding method for carrying out cryptographic operations. 



Technical field 

The invention relates to an encryption method as disclosed in the introductory 
part of Claim 1 wherein at least one cryptographic sub-operation yi = fi(x 1; ki) is performed on 
5 data x*, kj which are digitally stored as data bit words, the relevant result or intermediate 

results yj being digitally stored or buffered as data bit words. The invention also relates to an 
encryption device as disclosed in the introductory part of Claim 8 which includes a processor 
and registers Ri, the processor performing at least one cryptographic sub-operation yi = 
fi(Xi,kj) on operands xj, kj which are digitally stored as data bit words in the registers Rj of the 
10 encryption device, the relevant result or intermediate results y; being digitally stored or 
buffered as data bit words in the registers Ri of the encryption device. 
State of the art 

Cryptographic operations are carried out in many data processing apparatus so 
as to protect the operation of such apparatus or the data transported in the apparatus. The 

1 5 arithmetic operations required for this purpose are carried by standard processors as well as 
by dedicated crypto processors. A typical example of the latter processor is formed by a chip 
card or an IC card. As is shown in Fig. 1, for such cryptographic calculations it is often 
necessary to initialize relevant storage sections or registers of the data processing apparatus 
with operands Xi, ki. During the i th calculation intermediate results y! are possibly stored in 

20 storage sections or registers Rj or subsequently the result of the calculation is stored in 
storage sections or registers for further processing. The register R v is situated between a 
preceding i th cryptographic calculation and a subsequent (i+l) th cryptographic operation. The 
data Xi, ki or intermediate results yi used in this context customarily constitute security- 
relevant information such as, for example, cryptographic keys or operands. 

25 In order to calculate the cryptographic algorithms the data processing 

apparatus form logic combinations of operands kj or intermediate results yi or Xi, Xi+i. 
Depending on the technology used, such operations, notably the loading of the storage 
sections or registers with data, lead to an increased current consumption of the data 
processing apparatus. In the case of complementary logic, for example CMOS, an increase of 
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the current consumption occurs when the value of a bit storage cell changes, i.e. when its 
value changes from "0" to "1" or from "1" to "0". The increase of the consumption is then 
dependent on the number of bit positions changed in the memory or register. In other words, 
the loading of a previously erased register causes an increase of the current consumption 
5 which is proportional to the Hamming weight of the operand (= number of bits having the 
value "1 ") or to the difference in the Hamming weight. Analysis of such a current variation 
could thus enable extraction of information concerning the operations executed, thus enabling 
successful crypto analysis of secret operands such as, for example, cryptographic keys. For 
example, in the case of very small signal variations, adequate information could be extracted 

10 by carrying out a plurality of current measurements on the data processing apparatus. On the 
other hand, a plurality of measurements could also enable a possibly required differentiation. 
This type of crypto analysis is also called "Differential Power Analysis" whereby an outsider 
could successfully perform a possibly unauthorized crypto analysis of the cryptographic 
operations, algorithms, operands or data purely by observing changes in the current 

1 5 consumption of the data processing apparatus. 

From US 5,297,201 it is known to combine a high frequency radiating 
computer with a device which also radiates high frequency similar to that of the computer. As 
a result, unauthorized third parties can no longer decode the high-frequency radiated by the 
computer. This system, however, cannot prevent crypto analysis by a third party having 

20 direct access to the computer. 

In order to eliminate a correlation in chip cards between the output of a result 
of a cryptographic operation or a transfer of key information for a cryptographic operation 
and the cryptographic operation itself, it is known from Patent Abstracts of Japan 10069222A 
to delay the result of the cryptographic operation or the transfer of the key information for the 

25 cryptographic operations. However, this system can also be analyzed by way of Differential 
Power Analysis, because the delayed data transfer also becomes apparent in the current 
consumption of the data processing apparatus. 
Implementation of the invention, object, solution, advantages 

30 It is an object of the present invention to provide an improved method and an 

improved device of the kind set forth which eliminate the described drawbacks and 
effectively prevent crypto analysis by observation of current consumption of a data 
processing apparatus. 
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This object is achieved by a method of the kind set forth which is 
characterized as disclosed in Claim 1. 

To this end, according to the invention at option at least one of the data x i5 ki 
and/or the result or at least one intermediate result yi is bit- wise complemented to 
5 y = f( x i, k i ) and/or y i or not, depending on a control signal ri which is based on random 
numbers. 

This offers the advantage that other bit series are processed or stored in the 
case of repeated execution of the same cryptographic operation, so that the respective 
execution of a cryptographic operation or several cryptographic operations produce different 

10 current variations in the data processing apparatus. Irrespective of the actual value of the sub- 
results, in the case of repeated execution of the overall calculation it is thus achieved that 
each data path changes the same number of times from "0" to "0", from "0" " 1 from " 1 " to 
"0" and from "1" to "1" in the case of a pure random number series or practically the same 
number of times in the case of a pseudo-random number series. However, because the control 

15 signal t\ based on random numbers is not known or predetermined, there will be no 

correlation between the current variations and the bit values of the data and results, so that 
Differential Power Analysis no longer leads to successful crypto analysis. In other words, the 
mean current consumption of the overall operation does not contain usable information 
concerning the sub-operands or intermediate results used in the sub-operations. 

20 Advantageous further versions of the method are disclosed in the Claims 2 to 

7. 

Preferably, one or more XOR combinations (EXCLUSIVE- OR combinations) 
are formed during the cryptographic sub-operations. 

The data contain, for example cryptographic keys and/or operands. 
25 In a preferred version intermediate results yi are buffered in a register Rj 

between the execution of successive cryptographic sub-operations and are used as an operand 
Xi+i for the subsequent cryptographic sub-operations. 

In order to form an original, non-inverted value after each sub-operation, a bit 
series x i+ i = yj derived from the intermediate result yi of a preceding sub-operation i is bit- 
30 wise complemented to x i+i for a subsequent sub-operation i+1 if the data x\ 9 kj of the 
preceding sub-operation i were bit-wise complemented. 

In a particularly advantageous version at least one bit value, notably the even 
bit values, the odd bit values or all bit values, of a data bit word x i5 ki or yi are inverted during 
the bit- wise complementary operation. It is then particularly advantageous to perform an 
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inversion of bit values or bit addresses of a data bit word x i5 k ; or yi by means of an XOR 
operation (EXCLUSIVE-OR operation) during the bit-wise complementary operation. 

A device of the kind set forth according to the invention is provided with at 
least one inverter which can be controlled by a control signal r, and serves for at least one of 
the data x b ki and/or the result or at least one intermediate result y fa with a random number 
generator which generates random numbers, as well as with a device for generating the 
control signal r, on the basis of the random numbers, the controllable inverter either, in 
dependence on the control signal r-„ converting the bit series xu ki or yj into their bit-wise 
complement 3c is k i and y i, respectively, or leaving them unchanged. 

This offers the advantage that other bit sequences are processed or stored in 
the case of repeated execution of the same cryptographic operation, so that other current 
variations occur in the data processing apparatus during the respective execution of the 
cryptographic operation or cryptographic operations. Irrespective of the actual value of the 
sub-results, in the case of repeated execution of the overall calculation it is thus achieved that 
each data path changes the same number of times from "0" to "0", from "0" to "1", from "1" 
to "0" and from " 1 " to " 1 " in the case of a pure random number series or practically the same 
number of times in the case of a pseudo-random number series. However, because the control 
signal t[ based on random numbers is not known or predetermined, there will be no 
correlation between the current variations and the bit values of the data and results, so that 
Differential Power Analysis no longer leads to successful crypto analysis. In other words, the 
mean current consumption of the overall operation does not contain usable information 
concerning the sub-operands or intermediate results used in the sub-operations. 

Advantageous further embodiments of the device are described in the Claims 9 

to 14. 

In a preferred embodiment at least one register R s is succeeded by an inverter 
which receives the same control signal n as the inverter for the data xj, ki which precedes the 
i* sub-operation. The inverter succeeding a register Rj of the i* sub-operation is preferably 
combined with an inverter for input data x i+ i which precedes the subsequent (i+1)* sub- 
operation. The combined inverter preferably receives the control signal n of the preceding i th 
sub-operation as well as the control signal r i+ i of the subsequent (i+1)* sub-operation. 

The data contain, for example, cryptographic keys and/or operands. 

In a preferred embodiment a register Ri stores an intermediate result y { of the 
preceding i* sub-operation between a preceding 1 th sub-operation and a subsequent (i+1)* 
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sub-operation and forwards this intermediate result as an input value xj+i to the subsequent 
(i+l)** 1 sub-operation. 

Preferably, the bit-wise complementary operation inverts at least one bit value, 
notably the even bit values, the odd bit values or all bit values, of a data bit word Xj, ki or yj. 
5 Brief description of the drawings 

The invention will be described in detail hereinafter with reference to the 
accompanying drawings. Therein: 

Fig. 1 shows a flow chart of a part of a cryptographic operation according to 
10 the state of the art, 

Fig. 2 shows a flow chart of a part of a first preferred version of a 
cryptographic operation according to the invention, and 

Fig. 3 shows a flow chart of a part of a second preferred version of a 
cryptographic operation according to the invention. 
15 Preferred implementation of the invention 



In the first preferred version of an encryption method according to the 
invention as shown in Fig. 2 a cryptographic overall operation is performed by way of a 
chain of sub-operations fi(x i? ki) in which one or more logic XOR (EXCLUSIVE OR) 

20 combinations are formed. The Figure shows two sub-operations, i.e. the 1 th sub-operation 10 
and the (i+l)^ sub-operation 12, each sub-operation being executed by an arithmetic unit. 
Each sub-operation 10, 12 is succeeded by a storage cell or a register Ri 14 and a storage cell 
or a register Ri 16, respectively. Each sub-operation 10, 12 has as its input value data x i? x i+ i 
as well as an operand ki, k i+ i 5 both being available as data bit words. 

25 Each sub-operation 10, 12 is preceded by a respective controllable inverter 18 

and 20 for the data x i? x i+ i, respectively, as well as by a controllable inverter 22, 24 for the 
operands k i? kj+i. Furthermore, for each sub-operation 10, 12 the relevant register Ri 14 and 
R i+ i 16 is succeeded by a controllable inverter 26, 28 for the intermediate result y i? y i+ i, said 
intermediate result being propagated by the relevant register Ri 14 and R i+ i 16 to a 

30 subsequent sub-operation 12 as input data x i+ i and x i+ i, respectively. The inverters 18 to 28 
can be controlled by a control signal r t and r i+i , respectively, in such a manner that at option 
they bit-wise complement the associated data bit words or not, depending on the relevant 
control signal r* and r i+ i, respectively. All inverters 18, 22, 26 and 20, 24, 28 of a sub- 
operation 10 and 12, respectively, then receive the same control signal i{ and rn-i, 
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respectively. In other words, the decision whether an inversion of the relevant input values of 
the inverters 1 8 to 28 is performed or whether the input values traverse the inverters 1 8 to 28 
in non-processed form is taken by the additional control signal X{ and rj+i, respectively. This 
arrangement of registers 14, 16 between sub-operations 10, 12 is used particularly when the 
5 sub-operations 10, 12 are calculated successively in time by one and the same unit so that the 
sub-results must be buffered. 

The control signal is controlled by random values from a random generator in 
such a manner that, depending on the value of the random numbers, the sub-operation yields 
either the original result y = f(x,k) or the bit-inverted result y = f(x, k) . It is thus achieved 

10 that the calculation as well as the storage of the data in the registers Ri 14, 16 takes place 
either by way of original values or bit-inverted values. In the case of repeated execution of 
the overall calculation it is thus achieved that each data path changes over the same number 
of times from "0" to "0", from "0" to "1", from 'T' to "0" and from "1" to "1", irrespective of 
the actual value of the sub-results. The mean current consumption of the overall operation, 

1 5 consequently, does not contain useful information concerning the sub-operands ki or 

intermediate results yi involved in the sub-operations 10, 12. The inverter 26, 28 succeeding 
the registers 14, 16 restores the original, non-inverted value again for the next sub-operation 
12 again. 

The second preferred version of the encryption method according to the 
20 invention as shown in Fig. 3 corresponds to the first version shown in Fig. 2, the only 

difference being that the inverters 26, 28 succeeding the registers 14, 16 are combined with 
the respective input inverter 20 of the next stage 12 so as to form an inverter 30. 

The inverters invert, for example, only a part of the bit values of the relevant 
data bit word. For example, only the even or the odd bit words or bit addresses are inverted. 
25 The bit values are inverted, for example, by means of an XOR (EXCLUSIVE OR) operation. 
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CLAIMS: 



1 . An encryption method wherein at least one cryptographic sub-operation y$ = 
fi(xi,ki) is performed on data Xi, kj which are digitally stored as data bit words, the relevant 
result or intermediate results yi being digitally stored or buffered as data bit words, 
characterized in that 

5 at option at least one of the data Xi, k\ and/or the result or at least one intermediate result y\ is 
bit- wise complemented to x l , k t and/or y l or not, depending on a control signal r* which is 
based on random numbers. 

2. An encryption method as claimed in Claim 1, 
1 0 characterized in that 

one or more XOR (EXCLUSIVE OR) combinations are formed during the cryptographic 
sub-operations. 

3. An encryption method as claimed in Claim 1 or 2, 
1 5 characterized in that 

the data contain cryptographic keys and/or operands. 

4. An encryption method as claimed in one of the preceding Claims, 
characterized in that 

20 intermediate results yi are buffered in a register Ri between the execution of successive 
cryptographic sub-operations and are used as an operand Xr i for the subsequent 
cryptographic sub-operations. 

5. An encryption method as claimed in one of the preceding Claims, 
25 characterized in that 

a bit series Xj+i = yt derived from the intermediate result yi of a preceding sub-operation i is 
bit- wise complemented to x i+i for a subsequent-operation i+1 if the data Xi, ki of the 
preceding sub-operation i were bit-wise complemented. 
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6. An encryption method as claimed in one of the preceding Claims, 
characterized in that 

during the bit-wise complementary operation at least one bit value, notably the even bit 
values, the odd bit values or all bit values, of a data bit word x i; kj or y* are inverted. 

7. An encryption method as claimed in one of the preceding Claims, 
characterized in that 

bit values or bit addresses of a data bit word x i? ki or y; are inverted by means of an XOR 
operation (EXCLUSIVE OR operation) during the bit-wise complementary operation. 

8 - An encryption device which includes a processor and registers Ri (14, 1 6), the 

processor performing at least one cryptographic sub-operation y { = fj(xi,kj) (10, 12) on 
operands x;, ki which are digitally stored as data bit words in the registers Ri (14, 16) of the 
encryption device, the relevant result or intermediate result y* being digitally stored or 
buffered as data bit words in the registers Ri (14, 16) of the encryption device, 
characterized in that 

there are provided at least one inverter (1 8 to 28; 30) which can be controlled by a control 
signal n and serves for at least one of the data x i? ki and/or the result or at least one 
intermediate result y i5 a random number generator which generates random numbers, as well 
as a device for generating the control signal r* on the basis of the random numbers, the 
controllable inverter (18 to 28; 30) either, in dependence on the control signal r i? converting 
the bit series x i? kj or y s into their bit-wise complement x l9 k { and y is respectively, or leaving 
them unchanged. 

9. An encryption device as claimed in Claim 8, 

characterized in that 

at least one register (Ri(14, 16) is succeeded by an inverter (26, 28; 30) which receives the 
same control signal r, as the inverter (18, 20) for the data x i? ki which precedes the i* sub- 
operation (10, 12). 



1 0. An encryption device as claimed in Claim 9, 

characterized in that 
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the inverter (26, 28) succeeding a register Ri(14, 16) of the I th sub-operation (10, 12) is 
combined with an inverter (20) for input data Xi+i which precedes the subsequent (i-H) 1 * 1 sub- 
operation (12). 

5 11. An encryption device as claimed in Claim 1 0, 

characterized in that 

the combined inverter (30) receives the control signal T[ of the preceding 1 th sub-operation 
(10) as well as the control signal ri+i of the subsequent (i+l)^ sub-operation (12). 

10 12. An encryption device as claimed in one of the Claims 8 to 11, 

characterized in that 

the data contain cryptographic keys and/or operands. 

13. An encryption device as claimed in one of the Claims 8 to 12, 
1 5 characterized in that 

between a preceding 1 th sub-operation (10) and a subsequent (i+l)* sub-operation (12) a 
register Rj (14, 16) stores an intermediate result y\ of the preceding sub-operation (10) and 
forwards this intermediate result as an input value Xi+i to the subsequent (i+l)^ sub-operation 
(12). 

20 

14. An encryption device as claimed in one of the Claims 8 to 13, 
characterized in that 

the bit-wise complementary operation inverts at least one bit value, notably the even bit 
values, the odd bit values or all bit values, of a data bit word Xi, ki or yj. 
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The invention relates to an encryption method as well as to an encryption 
device wherein at least one cryptographic sub-operation y\ = fi(xi,kj) is performed on data x*, 
kj which are digitally stored as data bit words and wherein the relevant result or relevant 
intermediate results yi are digitally stored or buffered as data bit words. At option at least one 
5 of the data kj and/or the result or at least one intermediate result yi is bit- wise 

complemented to x i 9 k t and/or y t or not, depending on a control signal r { which is based on 
random numbers. 

Fig. 2 

10 
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c/o U.S. PHILIPS CORPORATION-, Intellectual Property Department ,^ 580 
White Plains Road, Tarrytown, New York 10591, his Associate 



Attorney (s) /Agent (s) with all the usual powers to prosecute the 
above- identified application and any division or continuation 
thereof, to make alterations and amendments therein, and to 
transact all business in the Patent and Trademark Office connected 
therewith. 



ALL CORRESPONDENCE CONCERNING THIS APPLICATION AND THE 
LETTERS PATENT WHEN GRANTED SHOULD BE ADDRESSED TO THE UNDERSIGNED 
ATTORNEY OF RECORD. 




Dated at Tarry town, New York 
this 24TH day of MAY, 2000 
S:\PW\MU25PWI0.CN0 
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09/555305 



COMBINED DECLARATION FOR PATENT APPLICATION AND POWER OF ATTORNEY, 
(includes Reference to PCT International Applications) 



ATTORNEY'S DOCKET 
NUMBER • 

PHD 99.099 US 



an 



2S MAY Z000 



As a below named inventor, I hereby declare that: 526 ftfiC'd i 

My residence, post office address and citizenship are as stated next to my name. 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, first and joint inventor (if 
plural names are listed below) of the subject matter which is claimed and for which aa patent is sought on the invention 
entitled: Encoding method for carrying out cryptographic operations" 
the specification of which (check only one item below): 

□ is attached hereto. 

□ was filed as United States application 

Serial No 



on 



and was amended 



on 



was filed as PCT international application 
dumber PCT/EP99/07012 



:*>n 



17 September 1999 (17.09.99) 



and was amended under PCT Article 19 

Hon . 



(if applicable). 



.|l hereby state that I have reviewed and understand the contents of the above-identified specification, including the 
« I claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to the examination of this application in accordance with 
Title 37, Code of Federal Regulations, § 1.56(a). 

I hereby claim foreign priority benefits under Title 35, United States Code, § 119 of any foreign application(s) for patent 
or inventor's certificate or of any PCT international application(s) designating at least one country other than the United 
States of America listed below and have identified below any foreign application(s) for patent or inventor's certificate or 
any PCT international application(s) designating at least one country other than the United States of America filed by me 
on the same subject matter having a filing date before that of the application(s) of which priority is claimed: 



PRIOR FOREIGN/PCT APPLICATION(S) AND ANY PRIORITY CLAIMS UNDER 35 U.S.C. 1 1 9: 



COUNTRY 



APPLICATION NUMBER 



DATE OF FILING 

DAY, MONTH, YEAR 



PRIORITY 
CLAIMED UNDER 
35 USC 119 



Germany 



19845095,8 



Germany 



19936918.6 



30 September 1998 



YES 



5 August 1999 



YES 



PTO 



U.S. DEPARTMENT OF COMMERCE -Patent and Trademarks Office 

(July 1994) 



Combined 1 Declaration For Patent Application and Power of Attorney (Continued) 
(includes Reference to PCT International Applications) 



Attorneys Docket Number 

PHD 99.099 US 



POWER OF ATTORNEY: As a named inventor, I hereby appoint the following attorney(s) abnd/or agent(s) to prosecute this application and transact 
all business in the Patent and Trademark Office connected therewith. (List name and registration number) 



Algy Tamoshunas Reg. NoJ!7Jl£L 
Jack E. Haken, Reg. No. 26,902 



Direct Telephone Calls to: 
(name and telephone number) 
(914)332-0222 



201 



FULL NAME OF 
INVENTOR 



FAMILY NAME 

PHIUEL 



FIRST GIVEN NAME 

Stefan 



SECONDE GIVEN NAME 



RESIDENCE & 
CITIZENSHIP 



CITY 

Hamburg^ 



STATE OR FOREIGivlCOUNTRYy 

Germany J ) 



city y 
20259 Hamburg 



COUNTRY OF CITIZENSHIP 

Germany 



POST OFFICE 
ADDRESS 

FULL NAME OF 
INVENTOR 



POST OFFICE ADDRESS 

Eimsbutte ler Chaussee 47 

FAMILY NAME 



STATE & ZIP CODE/COUNTRY 



Germany 



FIRST GIVEN NAME 



SECONDE GIVEN NAME 



202 



RESIDENCE & 
CITIZENSHIP 



CITY 



STATE OR FOREIGN COUNTRY 



COUNTRY OF CITIZENSHIP 



POST OFFICE 
ADDRESS 



POST OFFICE ADDRESS 



CITY 



FULL NAME OF 
INVENTOR 



FAMILY NAME 



FIRST GIVEN NAME 



STATE & ZIP CODE/COUNTRY 



SECONDE GIVEN NAME 



C203 



RESIDENCE & 
CITIZENSHIP 



CITY 



STATE OR FOREIGN COUNTRY 



COUNTRY OF CITIZENSHIP 



POST OFFICE 
ADDRESS 

FULL NAME OF 
INVENTOR 



POST OFFICE ADDRESS 



FAMILY NAME 



CITY 



STATE & ZIP CODE/COUNTRY 



FIRST GIVEN NAME 



SECONDE GIVEN NAME 



:204 



i205 



RESIDENCE & 
CITIZENSHIP 



CITY 



STATE OR FOREIGN COUNTRY 



COUNTRY OF CITIZENSHIP 



POST OFFICE 
ADDRESS 
FULL NAME OF 
INVENTOR 



POST OFFICE ADDRESS 



CITY 



STATE & ZIP CODE/COUNTRY 



FAMILY NAME 



FIRST GIVEN NAME 



SECONDE GIVEN NAME 



RESIDENCE & 
CITIZENSHIP 



CITY 



STATE OR FOREIGN COUNTRY 



COUNTRY OF CITIZENSHIP 



POST OFFICE 
ADDRESS 



POST OFFICE ADDRESS 



CITY 



STATE & ZIP CODE/COUNTRY 



FULL NAME OF 
INVENTOR 



FAMILY NAME 



FIRST GIVEN NAME 



SECONDE GIVEN NAME 



206 



RESIDENCE & 
CITIZENSHIP 



CITY 



STATE OR FOREIGN COUNTRY 



COUNTRY OF CITIZENSHIP 



POST OFFICE 
ADDRESS 



POST OFFICE ADDRESS 



CITY 



STATE & ZIP CODE/COUNTRY 



I hereby declare that all statements made herein of my own knowledge are true and that all statements made on information and belief are believed to be 
true: and further that these statements were made with the knowledge that willful false statements and the like so made are punishable by fine or 
imprisonment, or both, under section 1001 if Title 18 of the United states Code, and that such willful false statements may jeopardize the validity of the 
application or any patent issuing thereon. 



SIGNATURE OF INVENTOR 201 



pr il Z 



2000 



SIGNATURE OF INVENTOR 202 



SIGNATURE OF INVENTOR 203 



DATE 



DATE 



SIGNATURE OF INVENTOR 204 



SIGNATURE OF INVENTOR 205 



DATE 

SIGNATURE OF INVENTOR 206 



DATE 



DATE 



DATE 



U.S. DEPARTMENT OF COMMERCE- Patent and Trademarks Office 

(July 1994) 



PTO 



